Spot the Bug: first-depositor share inflation

A vault computes shares as amt * total / bal(), where bal() returns the vault's current token balance. The code compiles and matches the ERC4626 shape. What is still wrong?